[Bro-Dev] Broccoli question

Randy Caldejon randy at packetchaser.org
Thu Dec 19 15:12:19 PST 2013


On Dec 19, 2013, at 6:09 PM, Siwek, Jonathan Luke <jsiwek at illinois.edu> wrote:

> 
> On Dec 19, 2013, at 2:49 PM, Randy Caldejon <randy at packetchaser.org> wrote:
> 
>> Can somebody tell me if BRO_TYPE_TABLE is supported at part of a record?
> 
> Regardless of whether it’s part of a record, I don’t think broccoli can create and send tables (as well as sets/vectors).  You may have to send individual key-value pairs and reconstruct the table on the Bro-side.
> 
> - Jon

Ok, that's the path that I'll take.  Thanks for confirming.
  
-- Randy








More information about the bro-dev mailing list